CVE-2004-1486

CVE-2004-1486 affects HP-UX Serviceguard (A.11.x series) and Cluster Object Manager (A.01.x/B.01.x through B.03.00.01) with remote privilege escalation possible. Connected Nessus plugins enumerate multiple HP patches (PHSS_31065/PHSS_31066/PHSS_31067/PHSS_31069/PHSS_31070/PHSS_31072/PHSS_31073, e...

Ganglia Cluster Report Information Disclosure

Binary data 2492.prm...

CVE-2004-1486

Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unkno...

CVE-2004-2205

Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors...

CVE-2004-0318

Load Sharing Facility LSF 4.x, 5.x, and 6.x uses the LSFEAUTHUID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges...

VERITAS Cluster Server privilege escalation

No description provided...

CVE-2004-0317

CVE-2004-0317 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability is a buffer overflow in the eauth component triggered by a long LSF_From_PC parameter, allowing local users or attackers within an LSF cluster to cause a denial of service (segmentation fault) and pote...

Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users

Lam3rZ Security Advisory 2/2004 23 Feb 2004 Remote within a cluster root in LSF Name: Load Sharing Facility versions 4.x, 5.x, 6.x Severity: High Vendor URL: http://www.platform.com Author: Tomasz Grabowski [email protected] Vendor notified: 29 Oct 2003 Vendor confirmed: 30 Oct 2003 Vendor...

CVE-2003-1563

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters OPS/RAC allows local users to cause a denial of service cluster node panic or abort by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager DLM, possibly involving...

CVE-2002-1817

Unknown vulnerability in Veritas Cluster Server VCS 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-UX allows attackers to gain privileges via unknown attack vectors...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-2001-0078

CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...

CVE-2001-0077

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations...

CVE-2001-0077

CVE-2001-0077 concerns the clustmon service in Sun Cluster 2.x, which does not require authentication. This allows remote attackers to access sensitive information such as system logs and cluster configurations. The available connected documents confirm the vulnerability details (unauthenticated ...

CVE-2001-0287

VERITAS Cluster Server VCS 1.3.0 on Solaris allows local users to cause a denial of service system panic via the -L option to the lltstat command...

CVE-2001-0287

The vulnerability CVE-2001-0287 affects VERITAS Cluster Server (VCS) 1.3.0 on Solaris. A local user can trigger a denial of service (system panic) by using the -L option to the lltstat command. The available connected sources corroborate the affected product/version and the vulnerable user action...

CVE-2001-0287

VERITAS Cluster Server VCS 1.3.0 on Solaris allows local users to cause a denial of service system panic via the -L option to the lltstat command...

Option to VERITAS Cluster Server (VCS) lltstat command will panic system.

I had a hell of a time getting through to Veritas, but after I did they reacted VERY quickly. I apologize that I didn't get this info out to the general community sooner, but Veritas didn't tell me that they released the fix. In the name of full disclosure: synopsis: "When using VERITAS Cluster...

DoS против VERITAS Cluster Server

Команда llstat -L приводит к аварийному завершению системы...

sc.txt

Two Security Holes in Sun Cluster 2.x echo8 Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service...